CVE-2021-31955: medium-severity vulnerability in Microsoft Windows 10 Version 1809
Windows Kernel Information Disclosure Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply updates per vendor instructions.
A flaw in Windows Kernel allows unauthorized access to sensitive system memory information. An attacker with local access can read kernel data that should be protected, potentially exposing system details.
CWE-497 information exposure vulnerability in Windows Kernel allows local unprivileged processes to read kernel memory regions through a side-channel or improper access control mechanism. Requires local code execution; impacts confidentiality of kernel data structures and system configuration.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.